3 ms·
What's the difference between a VPC and iptables? I agree that you shouldn't expose insecure services. But why do I need to introduce an entire private address
by dcow 6y ago
What's the difference between a VPC and iptables? I agree that you shouldn't expose insecure services. But why do I need to introduce an entire private address space and cloud-managed SDN services to achieve that goal? If it weren't industry status quo, I'd almost call you a shill for the union of ops teams working to secure jobs for years to come. Almost.. (;
- llarsson 6y agoI would think that the post you respond to either supposes a hosted service (you do not control the server and its iptables) or that it multiple layers of protection is good for something critical. But yes, if it's your own server, everyone should remember that regular Linux features are darn powerful, too.
- mrweasel 6y agoA VPC, with security groups, can be much easier, depending on how your instances are managed. You’re sure that all the indtances have the same rules and that the rules are always updated, even in if you use auto-scaling. If you use some provisioning tool you can have the same thing with IPtables. But why are you on AWS if you don’t want to used the features Amazon provides?
- rantanplan 6y agoNot directly comparable. You can use iptables on a EC2 instance inside a VPC. VPC is more akin to a glorified virtual switch/bridge.